npm›tiny-conf›CVE-2020-77249.8 CRITICALImproper Input ValidationThe tiny-conf package is vulnerable to Prototype Pollution via the set function.